Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xfm-x84x-qwwq

Опубликовано: 15 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

EPSS

Процентиль: 18%
0.00059
Низкий

3.7 Low

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 3.7
ubuntu
24 дня назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

CVSS3: 3.7
nvd
24 дня назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

CVSS3: 3.7
debian
24 дня назад

A flaw was identified in the RelaxNG parser of libxml2 related to how ...

suse-cvrf
3 дня назад

Security update for libxml2

suse-cvrf
10 дней назад

Security update for libxml2

EPSS

Процентиль: 18%
0.00059
Низкий

3.7 Low

CVSS3

Дефекты

CWE-674